Latest CVE Feed
CVE Intelligence
Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.
Score
Vulnerability
Published
5.3
MEDIUM
CVE-2026-21722
— Public Dashboards time range restriction on annotations can be bypassed
Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visibl…
Feb 12, 2026
Feb 27, 2026
Feb 12, 2026
Feb 27, 2026
6.8
MEDIUM
CVE-2025-41117
— XSS in Grafana Explore stack trace
Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack tr…
Feb 12, 2026
Feb 26, 2026
Feb 12, 2026
Feb 26, 2026
8.7
HIGH
CVE-2025-15577
— Valmet DNA Web server arbitrary file read access
An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older.
Feb 12, 2026
Feb 23, 2026
Feb 12, 2026
Feb 23, 2026